Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 28WIktmkIrKyAjNcwOWa5Vihi00ndWoVeViytNghLJg=
Subject key identifier: 61:7B:B5:B8:C3:68:0F:33:5E:02:A2:27:CF:C0:DD:DC:1E:48:22:AC
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019A1D2CAC035805CF18FA5A656E081E4F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 21:00:57 +0000
Manifest this update: Sat 25 Oct 2025 21:00:57 +0000
Manifest next update: Sun 26 Oct 2025 21:00:57 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: mVCD5/menZ+RIMC+bKQbcpzk3VLu919uok3/kopEMrg=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:ac:03:58:05:cf:18:fa:5a:65:6e:08:1e:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Oct 25 21:00:57 2025 GMT
Not After : Oct 26 21:00:57 2025 GMT
Subject: CN=617bb5b8c3680f335e02a227cfc0dddc1e4822ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:de:db:85:7b:f8:65:fb:e1:0f:a2:bf:83:
7b:25:f5:48:e3:a2:a2:65:e3:63:e6:b9:99:ca:46:
bf:5e:62:70:8a:d8:43:f2:c5:bc:25:ef:ca:f4:c4:
53:6f:79:46:53:d3:9b:37:48:5a:9f:70:ff:04:ac:
2e:99:60:99:b9:80:e3:a6:fd:d6:c9:65:21:d3:78:
ef:86:5a:50:b3:56:ce:3b:41:1c:26:6a:31:58:dc:
1d:e8:74:ee:ce:24:e4:91:41:f8:43:da:d9:d3:36:
9a:0a:7d:55:62:08:07:35:46:75:42:d0:ad:7b:b7:
f5:9c:0f:aa:30:21:59:ef:6e:1d:04:90:ba:c5:ed:
a0:3b:2f:0f:04:0c:df:58:db:8d:a3:da:3b:7b:ab:
72:c5:ed:1d:60:f5:1c:fc:e8:73:34:83:7f:07:3d:
5e:90:d0:25:49:80:91:33:e0:ad:a6:f7:56:de:cc:
66:f2:77:eb:bd:98:62:70:ba:69:f3:ad:5c:b0:ee:
3c:46:62:26:6a:1a:5f:78:dc:e6:14:41:17:f6:e1:
b2:67:7f:93:29:93:e8:9b:10:6d:cf:74:5e:a0:d7:
f9:2d:e0:c1:ee:d8:b1:f7:81:39:54:a1:87:e3:7b:
18:92:95:2c:39:b8:52:c7:7a:73:79:a2:ea:2a:e2:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:B5:B8:C3:68:0F:33:5E:02:A2:27:CF:C0:DD:DC:1E:48:22:AC
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:23:f8:f0:7f:ab:0d:63:fe:21:9b:33:66:97:34:f6:25:46:
7d:db:db:6c:30:fa:18:4a:79:83:44:bf:74:ac:85:da:54:be:
58:53:17:5a:80:db:8b:85:5f:5d:fc:00:90:85:d2:43:31:2b:
38:fc:15:a9:8a:c4:7c:2e:3c:e0:fe:8b:dc:f2:c6:ed:1c:8a:
31:b5:5b:10:46:94:43:eb:0f:8d:aa:b4:c6:e2:23:32:f1:7f:
4b:b4:1f:07:5e:a4:95:97:75:20:0d:f9:3c:7e:d5:5f:dd:16:
0b:44:87:03:76:99:1c:cc:ec:d6:98:13:5f:20:11:8c:88:4f:
09:12:93:b5:1e:72:67:b3:ee:bc:56:0e:51:df:81:6c:56:73:
61:33:ce:62:83:a5:cc:4e:b3:97:5e:cb:81:a6:d7:65:c5:91:
0c:bb:1a:5c:59:8d:79:37:d8:10:c1:c8:a7:28:b1:a8:2b:32:
3b:8b:fb:8f:4a:87:cc:52:13:57:e3:22:83:4e:2b:07:98:e7:
88:48:81:05:eb:b3:6f:1f:bd:86:03:a6:0e:5c:dc:cb:1b:74:
ff:0e:31:79:aa:a1:10:48:db:66:82:62:60:cd:a3:94:dd:12:
ae:8c:43:81:92:83:49:04:2e:9d:b7:7e:93:69:35:f2:5e:77:
73:73:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:07 2025 by rpki-client